A specialized toolset for identifying, assessing, and remediating security vulnerabilities in Go modules and dependencies.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install go-security-vulnerability
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install go-security-vulnerability using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Go Security Vulnerability?
The Go Security Vulnerability skill is designed to fortify the security posture of Go-based applications by integrating official scanning tools like govulncheck. It provides a structured approach to identifying known vulnerabilities within a project's dependency graph, including both direct and transitive packages. By using Openclaw Skills for security management, developers can automate the detection of critical issues such as memory allocation flaws in JWT libraries or standard library patches, ensuring that remediation is handled without breaking application stability.
Go Security Vulnerability Use Cases
- Periodic security auditing of Go projects to find and fix known CVEs.\n- Assessing the real-world impact of a vulnerability by verifying if affected functions are actually called in the codebase.\n- Automating the update of vulnerable transitive dependencies that are not directly managed in the go.mod file.\n- Standardizing the verification process after security patches to ensure build and test integrity.
How Go Security Vulnerability Works
- The skill utilizes govulncheck to perform a static analysis of the Go source code and dependencies.\n2. It cross-references identified modules against the Go vulnerability database to flag specific CVEs.\n3. Affected packages are categorized by severity and usage status to help developers prioritize fixes.\n4. The skill suggests or applies remediation strategies, such as updating versions via go get or using module replacements.\n5. A final verification phase runs builds and tests to confirm that the security fixes are effective and haven't introduced regressions.
Go Security Vulnerability Setup
To use this skill, ensure that Go is installed on your system. You can install the necessary scanning tools using the following commands:\n\nbash\ngo install golang.org/x/vuln/cmd/govulncheck@latest\n\n\nTo scan your project for vulnerabilities, navigate to your project root and run:\n\nbash\ngovulncheck ./...\n
Go Security Vulnerability Data Schema & Taxonomy
The skill manages security data by interacting with standard Go module files and generating diagnostic reports.\n\n| Component | Purpose |\n| :--- | :--- |\n| go.mod | Analyzed to identify the dependency tree and updated during remediation. |\n| go.sum | Used to verify the integrity of updated packages. |\n| govulncheck Report | Provides JSON or text-based output detailing affected symbols and suggested versions. |\n| go mod why | Utilized to trace the origin of transitive vulnerabilities. |
Go Security Vulnerability Advanced Features
- Support for verbose scanning to uncover deeply nested dependency vulnerabilities.\n- Specialized handling for JWT library memory allocation issues (e.g., GO-2025-3553).\n- Transitive dependency resolution using go mod edit to force secure versions.\n- Automated go mod tidy integration to maintain a clean and secure dependency manifest.\n- Integration with Openclaw Skills workflows for continuous security monitoring.
SKILL.md
Loading
Related Openclaw Skills
Go Linter Configuration
A comprehensive utility for configuring, troubleshooting, and optimizing golangci-lint to ensure high code quality in Go projects.
GitHub Actions Troubleshooting
A specialized debugging toolkit for diagnosing and fixing GitHub Actions workflow failures with a focus on Go development environments.
Session Cleanup
A specialized utility for Openclaw Skills designed to safely purge orphan .jsonl files and expired session data to reclaim storage space.
Context Cleanup
A specialized utility for analyzing and archiving low-value memory notes to minimize context bloat in your AI workspace.
Qwen-Image / Z-Image Skill
A sophisticated AI image generation skill that intelligently switches between Qwen-Image and Z-Image models for optimal portrait and artistic rendering.
Qwen-Image Generator Skill
A high-performance AI image generation skill for Openclaw that intelligently switches between Qwen-Image and Z-Image models based on user prompts.
Featured*
